$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft File: F23594312FE527F86185AE38CC16265280FD40FA.mft (raw, json) Hash identifier: d3XmA9kbe+6M7WfOLET2o0Y/MWDSqbKec+yLwZkYQq0= Subject key identifier: 2C:3E:60:54:81:34:D3:47:D0:E1:69:D9:7E:82:DF:87:81:92:66:B3 Authority key identifier: F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA Certificate issuer: /CN=F23594312FE527F86185AE38CC16265280FD40FA Certificate serial: 714FB0556F40BE703FD2F64EAD0E664F2F854E7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 08:36:17 +0000 Manifest this update: Thu 24 Sep 2026 08:31:17 +0000 Manifest next update: Fri 25 Sep 2026 10:53:17 +0000 Files and hashes: 1: 3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (hash: 7MJm9/1g/gkw58AS1qnqSYx9VaW3KBNo5zcIcw63iro=) 2: F23594312FE527F86185AE38CC16265280FD40FA.crl (hash: 2/ag2f8T2RANIN91H/zjkb64aePP4fRUakEz3VipbXg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4f:b0:55:6f:40:be:70:3f:d2:f6:4e:ad:0e:66:4f:2f:85:4e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23594312FE527F86185AE38CC16265280FD40FA Validity Not Before: Sep 24 08:31:17 2026 GMT Not After : Sep 25 10:53:17 2026 GMT Subject: CN=2C3E60548134D347D0E169D97E82DF87819266B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:4b:8c:eb:f2:3c:e0:00:f3:3f:0c:10:d6: ce:fe:d3:25:bf:46:0d:36:3d:d7:b8:a0:8d:47:b3: 4f:8c:ab:f4:97:54:d1:a0:f1:53:e7:0b:b3:38:ae: 21:21:de:6b:ae:fa:81:88:6a:e8:1d:20:0b:a2:6d: e1:eb:a4:11:4b:13:32:11:9c:60:30:07:8c:93:f6: 04:bf:95:52:f4:24:ad:e0:f1:8e:7c:6d:a7:1c:c3: 57:fc:81:2b:ce:bb:b5:15:93:b9:08:7a:ed:cf:54: 02:25:3b:04:d5:5f:d7:ca:83:6c:22:73:2e:5b:7c: 47:06:f7:c2:c3:32:64:ae:bc:31:e1:19:28:6f:af: fc:5f:6e:be:cd:0c:ba:13:55:07:5f:0b:24:cf:e1: b9:0f:05:5e:84:dd:df:74:00:64:e4:78:92:0c:10: 5d:90:57:8a:b1:72:6b:66:d1:b4:3e:7d:fe:a4:e4: dc:c4:7e:65:d8:e7:97:90:db:94:5c:38:88:0c:3d: f7:7e:a7:90:e6:1b:0b:e4:e9:5f:20:d2:a1:46:cb: b9:7c:0a:4d:db:ea:be:33:30:aa:3f:88:1a:87:a5: 47:22:9e:05:9b:e0:64:91:97:31:89:1d:4b:66:96: e2:a3:a7:71:5f:bb:10:b8:f9:5a:00:4e:48:51:ac: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3E:60:54:81:34:D3:47:D0:E1:69:D9:7E:82:DF:87:81:92:66:B3 X509v3 Authority Key Identifier: keyid:F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:29:73:69:6c:92:67:b7:7d:23:ef:c5:6f:53:23:ab:e3:42: 72:a1:b8:6a:6d:b6:7d:16:e0:ce:9a:2e:07:23:d9:77:8d:5e: b6:4f:75:fc:f4:52:4d:42:1d:f1:47:73:3d:1f:28:f2:da:f8: d9:8a:c2:7d:ef:08:73:66:94:cf:60:99:90:db:7a:44:b3:99: e7:99:b1:a1:d4:cd:cd:07:ac:3e:b5:ff:da:75:62:55:13:6f: ff:6e:a4:f4:e7:38:97:1f:d7:6c:57:26:41:c2:ec:61:21:2e: af:74:fc:ce:1d:ce:e4:07:22:3d:1f:29:44:e6:e5:65:ee:d0: 43:aa:76:dd:60:64:b9:d5:2a:c2:2a:d2:cd:d0:00:fa:71:b6: 51:a1:4e:a4:b3:e0:14:2e:1e:5a:64:ee:43:2f:e2:ca:c1:1f: 06:ed:f4:36:5f:05:34:40:6b:7c:5b:29:1e:88:23:10:a1:82: d4:05:50:8e:0c:ad:c7:c7:aa:1b:9f:0e:c6:2a:72:c1:f3:0b: 8c:52:14:6f:8b:07:35:76:ff:c9:2a:6d:b3:85:69:56:44:45: 60:fe:f9:4f:bd:42:14:9e:7e:33:33:d5:24:73:da:0f:3c:5e: eb:67:3c:df:2b:1d:7e:e6:70:4a:c9:08:e9:51:24:4c:f8:57: f0:b5:16:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcU+wVW9AvnA/0vZOrQ5mTy+FTn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzNTk0MzEyRkU1MjdGODYxODVBRTM4Q0MxNjI2NTI4 MEZENDBGQTAeFw0yNjA5MjQwODMxMTdaFw0yNjA5MjUxMDUzMTdaMDMxMTAvBgNV BAMTKDJDM0U2MDU0ODEzNEQzNDdEMEUxNjlEOTdFODJERjg3ODE5MjY2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYEuM6/I84ADzPwwQ1s7+0yW/ Rg02Pde4oI1Hs0+Mq/SXVNGg8VPnC7M4riEh3muu+oGIaugdIAuibeHrpBFLEzIR nGAwB4yT9gS/lVL0JK3g8Y58baccw1f8gSvOu7UVk7kIeu3PVAIlOwTVX9fKg2wi cy5bfEcG98LDMmSuvDHhGShvr/xfbr7NDLoTVQdfCyTP4bkPBV6E3d90AGTkeJIM EF2QV4qxcmtm0bQ+ff6k5NzEfmXY55eQ25RcOIgMPfd+p5DmGwvk6V8g0qFGy7l8 Ck3b6r4zMKo/iBqHpUcingWb4GSRlzGJHUtmluKjp3FfuxC4+VoATkhRrF8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULD5gVIE000fQ4WnZfoLfh4GSZrMwHwYDVR0j BBgwFoAU8jWUMS/lJ/hhha44zBYmUoD9QPowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRhMjMyMmYtZjM1MS00MjhkLWE3NDctOTBkZmQzMjJiNTQxLzAvRjIzNTk0MzEy RkU1MjdGODYxODVBRTM4Q0MxNjI2NTI4MEZENDBGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjM1OTQzMTJGRTUyN0Y4NjE4NUFFMzhDQzE2MjY1MjgwRkQ0 MEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRhMjMyMmYtZjM1MS00MjhkLWE3 NDctOTBkZmQzMjJiNTQxLzAvRjIzNTk0MzEyRkU1MjdGODYxODVBRTM4Q0MxNjI2 NTI4MEZENDBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABopc2lskme3fSPvxW9TI6vjQnKhuGpttn0W 4M6aLgcj2XeNXrZPdfz0Uk1CHfFHcz0fKPLa+NmKwn3vCHNmlM9gmZDbekSzmeeZ saHUzc0HrD61/9p1YlUTb/9upPTnOJcf12xXJkHC7GEhLq90/M4dzuQHIj0fKUTm 5WXu0EOqdt1gZLnVKsIq0s3QAPpxtlGhTqSz4BQuHlpk7kMv4srBHwbt9DZfBTRA a3xbKR6IIxChgtQFUI4MrcfHqhufDsYqcsHzC4xSFG+LBzV2/8kqbbOFaVZERWD+ +U+9QhSefjMz1SRz2g88XutnPN8rHX7mcErJCOlRJEz4V/C1FrE= -----END CERTIFICATE-----Generated at Thu Sep 24 17:42:40 2026 by rpki-client